Microsoft Azure Firewall Bypass Vulnerability

Tenable Research discovered a vulnerability in Azure (customer action required). The vulnerability allows a malicious attacker to bypass firewall rules based on Azure Service Tags by forging requests from trusted services. A threat actor could exploit Service Tags that have been allowed through a user's firewall if there are no additional validation controls.

The affected services are:

• Azure Application Insights
• Azure DevOps
• Azure Machine Learning
• Azure Logic Apps
• Azure Container Registry
• Azure Load Testing
• Azure …

azure bypass bypass vulnerability firewall firewall bypass microsoft microsoft azure vulnerability